Need ARP list configured on every switch when using DAI

[qilin zhang]

Hi all,

Now we are deploying the DAI solution in our compus network to prevent from the arp attack.

Because we don't use the DHCP in our LAN, we need create the static arp list manually on the switch. As we know that ARP list is associated with VLAN, so I configured the arp list in our core switch 6509 and associated it with the specific VLAN to inspect the arp.

My question is do we need to configure the arp list on all of the switch, or just on the core switch?

Thanks,

Kirin

[andrew.prince]

Kirin,

That all depends on if all the other switches in your topology are doing any Layer 3 routing, if not - then your core router is the only layer 3 device that needs the arp entries, in my opinion.

HTH>